Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

2
votes
0answers
18 views

DynDNS alongside Tor?

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer behind a NAT even if I am in a country that consider supicious connections to my native country ?
2
votes
2answers
28 views

Could my DNS requests get manipulated while using tor?

I just downloaded Tor Browser Bundle and extracted it. I had no copy of my Tor Nodes Settings so i just browsed using the standard nodes and i forgot to disabke Java Script. I did not notice ...
5
votes
2answers
359 views

Questions on true anonymity

I am going to use Tails to connect to Tor through VPN which has AES-256 data encryption, SHA-256 data authentication and RSA-4096 handshake encryption on my Mac on my school's WiFi (as public as I can ...
6
votes
1answer
47 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
4
votes
3answers
160 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
9
votes
4answers
2k views

Why disable JavaScript in Tor? [duplicate]

Why it is not advisable to use JavaScript with Tor? Yet with JavaScript, you cannot get the IP address of the user except through an external website. How could using JavaScript with Tor expose one's ...
1
vote
0answers
42 views

Can high network usage be detected and prevented in Tor? [closed]

I've already asked this question here but as of yet it has no views/answers. I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using ...
0
votes
1answer
42 views

Going to host a “hidden service”, should I “wipe” or edit file metadata?

I have made a site that is a hidden service on the Tor network. I was wondering if there any security risks by leaving metadata untouched for various files including but not limited to stylesheets ...
6
votes
2answers
98 views

TOR: same exact entry node since a week ago

Since a few days ago, my copy of TOR (4.5.3) keeps using exactly the same entry node every single time I use it. I am pretty sure that that's not how it used to be in the past. I feel a bit ...
0
votes
0answers
7 views

Can I change my .onion address name? [migrated]

So I already created a .onion site but I want to change my address to something else, that is more than just symbols. I tried using shallot but that is not working and when I tried to install or find ...
1
vote
2answers
53 views

Could anyone technically see my requests with TOR if the person has access to my router?

I was wondering if someone could sniff the packets I send via my computer with something like Wireshark I guess even if I use TOR and the person could access the router like stated.
5
votes
4answers
117 views

MITM attack between me and TOR entry node

In which ways can my ISP, who by the way controls the WiFi router I connect to, do a MITM attack on my TOR connections and hence read the traffic?
0
votes
0answers
21 views

Route outgoing traffic through whonix gateway/tails, allow incoming vpn traffic (me->my vpn server-> tor) [migrated]

Basically I want to do VPN -> tor, but with all outgoing traffic from the VPN server going through tor, and the Virtual Machines only on the VPN server, not on my PC. So I will have a VPN which will ...
-1
votes
1answer
75 views

Using Tor browser to use YouTube, account security is the problem

YouTube is not available in my country, but I want to make an account at YouTube and use it. I'm not interested in protecting my identity. It is fine if anyone can monitor it. The thing I'm interested ...
-2
votes
1answer
58 views

Tor website HPKP (key pinning) failure

I'm currently facing a key pinning error when trying to access the torproject.org website with Firefox. Is anyone facing the same problem? Does anyone know if they changed their certificate? If not, ...
0
votes
0answers
81 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
4
votes
1answer
144 views

Decrypting TOR traffic?

Is there any way to decrypt tor traffic from an exit node or relay? I know it's possible to analyze the traffic using something like tcpflow or tcpdump, but it comes back as encrypted giberish. Is ...
0
votes
0answers
64 views

Is this a security flaw in tor? [duplicate]

I realize this question more belongs on the tor exchange (and i have indeed posted it there) so if you want to vote to close this question I completely understand. But I have noticed that this site it ...
1
vote
2answers
132 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
42 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
4
votes
1answer
56 views

TOR makes multiple connections - why?

When using TOR, I issued this in terminal sudo netstat -punta | grep 443. Output was tcp 0 0 x.x.x.x:y a.a.a.a:443 ESTABLISHED 5769/tor tcp 0 0 x.x.x.x:y ...
1
vote
0answers
18 views

Whonix Signature verification failure

I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
-1
votes
2answers
46 views

Can Tor pre-built binaries be different than if someone builds from source? [closed]

Is there a possibility (and how likely is it) that the pre-built binaries of Tor that most of us use are backdoored or altered in some way, unlike the source code?
3
votes
4answers
205 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
2
votes
1answer
129 views

What is the best setup to keep my email private from both attackers and government agencies?

I am attempting to setup a secure and private email account for my company. we currently use gmail which actually requests the emails from a hosting service provider that is configured with our ...
1
vote
0answers
65 views

Setting the exit node of a tor relay by country [closed]

I'm having some trouble in setting the country of the tor exit nodes. Following this link, by adding the bellow entries to the ./Data/torrc ExitNodes {ru} StrictNodes 1 an exit node from the ...
2
votes
1answer
95 views

Are darknets in the internet like Tor and i2p similar to darknets implemented for security like the CAIDA network telescope.?

I am planning to implement a darknet in an organizational network to work alongside SNORT to detect malicious scanning activities in the network like the CAIDA network telescope/Internet Motion ...
-3
votes
2answers
79 views

Is there any benefit to login to a website as anonymously as possible, if you've already been there from an identifiable IP address?

Here's a basic example of the situation I am in: 1.Friend downloads full-length, new release movie on shady internet site (felony). 2.Uploads it to a randomly created, cloud hosting service account ...
5
votes
3answers
142 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
3
votes
2answers
188 views

How does a Tor exit node know the public key of the client?

When the Tor exit node executes the client's request and receives a response from the server, it must create an onion cell that can be reversely decrypted along a circuit through the Tor network. ...
4
votes
2answers
141 views

How do dissidents use Tor?

The most common justification for Tor is that people in countries like China that don't have full protections on free speech can use it to publish dissenting opinions or access foreign information. I ...
1
vote
2answers
177 views

Is chaining multiple VPNs a good way to reach anonymity on the internet?

I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity. I've ...
0
votes
0answers
33 views

How to detect if Tor is being used in the network [duplicate]

I believe Tor is an excellent tool to anonymise the internet usage. However as an admin, how can someone detect if Tor is being used on the network? This becomes crucial in case of institutions like ...
2
votes
1answer
93 views

Non-profit on limited budgets looking for safety with VPN/TOR etc [closed]

First off, thank you ahead of time for your patience. We are a small non-profit with a 100% volunteer staff. We deal with children and some adults that suffer from Mitochondrial disease. So, I was ...
4
votes
3answers
110 views

Does using DNSSEC in parallel with an anonymisation network decrease your privacy?

When using an anonymous communication network like Tor, to ensure privacy you must route your DNS traffic through the system even if your computer always uses DNSSEC for DNS lookups, would this be ...
1
vote
3answers
115 views

Using TOR secure

TOR is fully secure only if I use HTTPS, right? But not every site supports it, so I had an idea - some online anonymizers support HTTPS, so if I connect via TOR (TOR - ANONYMIZER - site), will that ...
2
votes
2answers
298 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
0
votes
1answer
49 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
1
vote
1answer
28 views

Syverson's paper (Users Get Routed), What do they mean by “common locations”?

I am preparing a survey on Tor and its security. While searching for resources, I have come across with the paper Users Get Routed:Traffic Correlation on Tor by Realistic Adversaries. I comprehend the ...
0
votes
2answers
62 views

Using the TOR network with a Proxy

I have just implemented a new web-filtering proxy system for my organisation, and I was wondering what the recommendations would be to test the use of TOR through this web-proxy. We are doing SSL ...
6
votes
1answer
465 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
1
vote
1answer
62 views

why tor nodes maintain tls keys with all other tor nodes?

I read that tor proxy maintains session key with tor nodes and use it while encrypting data but why tor nodes maintain keys with other tor nodes?
0
votes
1answer
196 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
3
votes
1answer
108 views

How secure are Tor circuits?

Sometime ago I was talking with a friend about security of different anonimity software kits. The most famous software we talked about was Tor. While I was talking about the triple secret used in ...
2
votes
2answers
98 views

Using anonymous email as official email

Assuming I have created an email in hushmail through of tor, and if I use it as my official email in a site such as Github. Will it throw my anonymity away as I use github from a regular browser?
12
votes
3answers
310 views

Is there any difference between visiting Facebook via their Tor address, and visiting them via their normal address over Tor?

From a security perspective, is visiting via the .onion address more/less secure? I'm using Facebook as an example, but this question is really about any website which has both a 'normal' and a Tor ...
0
votes
0answers
127 views

Is a VPN enough to hide my trafic from my schools IT department? [duplicate]

At my school we log on WiFi with a personal login. If I wanted to hide the traffic from my computer from the network administrators would it be enough for me to use a VPN service like for example ...
1
vote
0answers
21 views

Is it possible to combine VPN and TOR on the same connection? [duplicate]

I'm looking into using a Raspberry Pi 2 between my Router and my Modem acting as an VPN and possibly a TOR gateway (two-in-one). It should just be out-of-the-way and passively/transparently route all ...
5
votes
2answers
152 views

How does Tor guarantee anonymity of Tor network?

To me it seems that the only thing Tor is doing for anonymity (not security!) is the fact that it does not record the traffic in and out, because obviously if every router was recording the traffic ...
0
votes
1answer
64 views

Security of host computer and network with Tor

I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it). I wanted to know if I should have any concerns about the security ...